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CLAIMS 



• 



We claim: 



1. A method of generating se^ure~ endorsed 



generatina uniaue code 




transactions comprised of transaction data representative 
of transactions and unique identifiers corresponding to 
parties endorsing the transact iyons, the method comprising 
the steps, performed by a dataf /processing system, of: 

receiving transaction d//c\ anfl unique identifiers; 
and // V 



rrcyh the transaction data 
and unique identifiers, therein the unique codes 



constitute secure endorsements of the transaction data by 
the parties corresponding to the unique identifiers. 



2. The methofl of claim 1 wherein the generating 
step includes the Jsubstep of: 

formatting tme unique codes, the transaction data, 
and the unique /dentifiers to produce single whole 
representation of secure endorsed transactions. 

3. T#e method of claim 1, wherein the data 
processing/ system includes a storage means, and wherein 
the generating step includes the substep of: 

staring the unique codes, the transaction data, and 
the un/que identifiers in the memory means. 
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4. method of claim 2, where^^the data 

processing system includes a storage means, and wherein 
the formatting step includes the substep of: 

storing the single whole representations of secure 
endorsed transactions in the ^m^we^'Tieans . 




In a network comprised of point of sale (POS) 



equipmen^ distributed remotely from a central controller, 
wherein the POS equipment includes a transaction input 
1 an identifier inj£ut device. 
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device and 



a process for 



\ / 

generating secure endorsed transactions comprising the 



steps, performed by the POS equipment, of: 

receiving transaction input and unique human 
identifiers; \ 

\ 

generating unique codes from the transaction data 

and unique human identifiers, wherein the unique codes 

constitute secure endorsements of the transaction data by 

\ 

the individuals corresponding to the unique human 



identifiers; and 



\ 



transmitting the unique^ codes along with the 
transaction input and unique human identifiers to the 

central controller, wherein the\ unique codes, the 

\ 

transaction input, and the unique\human identifiers 

\ 

constitute secure endorsed transactions. 

\ 

V 
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6. T^^process of claim 5, whe^Jl the central 
controller is connectable by a telecommunications network 
to the POS equipment, and wherein the transmitting step 
further includes the substep of: 

linking the POS equipment to the telecommunications 
network . 

7. The process of claim 6, wherein the central 
controller receives a signal indicating that the POS 

10 equipment has linked to the telecommunications network 

and wherein the linking substep further includes the sub- 
substep of: 

sending the unique codes along with the transaction 
input and unique human identifiers to the central 
15 controller via the telecommunications network. 



20 



The process of claim 5, wherein the 
transmitting st-ej^ includes the substep of: 

formatting the unifou^ c^pdes, the transaction data, 
and the unique human iddjptiyf ie^s^to produce single whole 
representations of secure endorsed transactions. 
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9. The process of claim ^8*, wherein the central 

A 

controller is connectable by a telecommunications network 
to the POS equipment, and wherein the transmitting step 
further includes the substep of: 

39 



linkir^^^he POS equipment to the 
network . 



ecommuni cat ions 



i n 



10. The process of claim 9, wherein the central 
controller receives a signal indicating that the POS 
equipment has linked to the telecommunications network 
and wherein the linking substep further includes the sub- 
substep of: 

sending the single whole representations of secure 
endorsed transactions to the central controller via the 
telecommunications network . 



15 



20 



25 

LAW OFFICES 

Finnecan, Henderson, 
Farabow, Garrett 
& Dunner,l.l.r 

t300 I STREET, N. W. 
WASHINGTON, DC 20005 
202-408-4000 



11. A method of generating forge-resistant, tamper- 
resistant secure endorsed transactions comprised of 
transaction data representative of transactions, unique 
human identifiers corresponding to at least one party, 
called first party, endorsing a transactions, and public 
keys corresponding to at least a second party endorsing a 
transaction, wherein the public keys have corresponding 
private keys maintained in secret by the second party, 
the method comprising the steps, performed by a data 
processing system, of: 

receiving transaction data, a unique human 
identifier, and a public key; 

generating a unique code from the transaction data, 
the unique human identifier, and the public key, wherein 

40 



the unique .e constitutes a secure d^BBrsement of the 

transaction data by the first party; and 

generating, using a private key corresponding to th 
received public key, a digital signature of the unique 
code, wherein the digital signature constitutes a secure 
endorsement of the transaction data by the second party. 



12. The method of claim 11 wherein the second 
generating step includes the substep of: 
10 formatting the digital signature, the transaction 

data, the unique human identifier, and public key to 
produce a single whole representation of the tamper- 
resistant secure endorsed transaction. 

15 13. The method of claim 11, wherein the data 

processing system includes a storage means, and wherein 
the second generating step includes the substep of: 

storing the digital signature, the transaction data 
the unique human identifier, and the public key in the 
20 memory means. 

14. The method of claim 12, wherein the data 
processing system includes a storage means, and wherein 
the formatting step includes the substep of: 
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storir^^he single whole represeri^^rions of tamper- 
^ Q^, resistant secure endorsed transaction in the memory/ 
means . 
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15. A method of verifying secure endorsed 
transactions comprised of transaction data representative 
of transactions, unique human identifiers corresponding 
to individuals endorsing the transactions , and unique 
codes generated from the transaction data and unique 
human identifiers, method comprising the steps, performed 
by a data processing system, of: 

receiving secure endorsed transactions; and 

generating unique codes from the transaction data 
and unique human identifiers of the secure endorsed 
transactions, wherein the unique codes constitute secure 
endorsements of the transaction data by the individuals 
corresponding to the unique human identifiers; and 

comparing the unique codes of the received secure 
endorsed transactions with the generated unique codes to 
determine if there is a match, wherein if the unique 
codes of the received secure endorsed transactions match 
the generated unique codes then neither the transaction 
data nor unique human identifiers of the secure endorsed 
transactions have been altered prior to execution of the 
verification method. 
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16. network comprised of pd^P? of sale (POS) 

equipment distributed remotely from a central controller, 
wherein the POS equipment includes a transaction input 
device and an identifier input device, a process for 
verifying secure endorsed transactions having transaction 
data representative of transactions, unique identifiers 
corresponding to parties endorsing the transactions, and 
unique codes generated from the transaction data and 
unique identifiers, comprising the steps, performed by 
the POS equipment, of: 

receiving secure endorsed transactions; 

generating unique codes from the transaction data 
and unique identifiers of the secure endorsed 
transactions, wherein the unique codes constitute secure 
endorsements of the transaction data by the parties 
corresponding to the unique identifiers; and 

comparing the unique codes of the received secure 
endorsed transactions with the generated unique codes to 
determine if they match, wherein if the unique codes of 
the received secure endorsed transactions match the 
generated unique codes then neither the transaction data 
nor unique identifiers of the secure endorsed 
transactions have been altered prior to execution of the 
verification process. 
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17. T^J^process of claijrf-17, whe^^n the comparing 
step includes the substep^of: 

transmitting versification signals to the central 
controller indic^i^nj^ that neither the transaction data 
nor the unique'' i^^r^tif iers of the secure endorsed 
transactions have been altered prior to execution of the 
verification process. 



18. The process of claim 16, wherein the POS 
10 equipment includes an output display, and wherein the 
comparing step includes the substep of: 

displaying verification messages indicating that 
neither the transaction data nor unique identifiers of 
the secure endorsed transactions have been altered prior 
15 to execution of the verification process. 
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19. A method of verifying a tamper-resistant secure, 
endorsed transactions comprised of transaction data 
representative of a transaction, a unique identifier 
corresponding to at least one party, called a first 
party, endorsing the transaction, a public key 
corresponding to at least a second party endorsing the 
transaction, wherein the public key has a corresponding 
private key maintained in secret by the second party, and 
a digital signature generated using the private key 
corresponding to the public key, wherein the digital 

44 



10 



15 



signature d^^titutes an endorsement k^^he second party 
of the transaction, the method comprising the steps, 
performed by a data processing system, of: 

receiving a tamper-resistant secure endorsed 
transactions- 
generating a stored unique code from the digital 
signature and the public key of the tamper-resistant 
secure endorsed transaction; 

generating a unique code from the public key, the 
human identifier, and the transaction data of the tamper- 
resistant secure endorsed transaction; and 

comparing the unique code with the stored unique 
code to determine if they match, wherein if the stored 
unique code matches the generated unique code then 
neither the transaction data nor unique identifiers of 
the tamper-resistant secure endorsed transaction was 
altered prior to execution of the verification process. 
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20. The process of claim 5, wherein the POS 
equipment includes a smart card device for 
reading/writing card data for the transaction data from 
smart cards, wherein the receiving step includes the 
substeps of: 

receiving signals from the smart card device 
indicating the insertion of smart cards; and 
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acquiJ^H? card data from the insd^P?d smart cards 
for inclusion in the transaction data. 

21. The process of claim 20, wherein the 
transmitting step includes the substep of: 

dispatching the secure endorsed transactions to the 
inserted smart cards. 



10 



22. The process of claim 20, wherein the 
transmitting step includes the substep of: 

writing the secure endorsed transactions on the 
inserted smart cards. 
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23. In a network comprised of point of sale (POS) 
equipment distributed remotely from a central controller 
wherein the POS equipment includes a transaction input 
device for receiving transaction input and an identifier 
input device for receiving unique identifiers optionally 
connectable to a smart card device for reading/writing 
card data from smart cards and writing data 
representative of secure endorsed transactions to smart 
cards, a process for generating secure endorsed 
transactions comprising the steps, performed by the POS 
equipment, of: 

receiving a signal indicating insertion of a smart 
card in the smart card device; 

reading card data from the inserted smart card; 

46 





recei^^B transaction input from^^! transaction 




input device; 




combining the card data and transaction input to 




form a transaction data representative of a complete 


5 


transactions- 
receiving a human identifier from the identifier 

input device, the unique identifier corresponding to a 

party endorsing the complete transactions- 
generating a unique code from the transaction data 


10 


and the unique identifier, wherein the unique code 
constitutes an endorsement of the complete transaction by 


O 


the party corresponding to the unique identifier; and 


ffl 


storing the unique code along with the transaction 




data and unique identifier on the smart card, wherein the 


rij is 


unique code, the transaction data, and the unique 




identifier combined constitute a secure endorsed 


srrl* 


transaction . 




24. A system^or generating secure endorsed 
transactions havincf transaction data representative of 
transactions and /iniJque identifiers corresponding to 
parties endorsing rajie transactions, the system 
comprising: / 

means for receiving transaction data and unique 
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identifies; and 
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means generating unique codes^^fom the 

transaction data an/ unique identifiers, wherein the 
unique codes constitute secure endorsements of the 
transaction dat/a bJSthe parties corresponding to the 
unique identifiers 



25. The process of claim 1, wherein the data 
processing system includes a smart card device for 
reading/writing card data for the transaction data from 
10 smart cards wherein the receiving step includes the 
substeps of: 

receiving signals from the smart card device 
indicating the insertion of a smart card; and 

acquiring card data from the inserted smart card for 
15 inclusion in the transaction data. 
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26. The process of claim 25, wherein the 
transmitting step includes substep of: 

dispatching the secure endorsed transaction to the 
inserted smart card. 
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27. The process of claim 26, wherein the 
transmitting step includes the substep of: 

writing the secure endorsed transaction on the 
inserted smart card. 
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28. fl^^thod of generating transitions comprised 
of transaction receipt data Representative of 
transactions, wherein a d^ta processing system includes a 
smart card device for storing input transaction data and 
output transaction cjAa, the method comprising the steps, 
perform by the dat& processing system, of; 

receiving /npu/ transaction data from a smart card 
inserted in tne smart card device; 

generating output transaction data using the input 
transaction data; and 

dispatching the output transaction data to the smart 
card .> 



29. The process of claim 11, wherein the data 
15 processing system includes a smart card device for 

reading/writing card data for the transaction data from 
smart cards wherein the receiving step includes the 
substeps of: 

receiving signals from the smart card device 
20 indicating the insertion of a smart card; and 

acquiring card data from the inserted smart card for 
inclusion in the transaction data. 
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30. The process of claim 29, wherein the 
transmitting step includes substep of: 
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dispai^H^ng the secure endorsed t^^saction to the 

inserted smart card. 
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31. The process of claim 30, wherein the 
transmitting step includes the substep of: 

writing the secure endorsed transaction on the 
inserted smart card. 
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